1
/* arch/arm/mach-msm/smd_qmi.c
3
* QMI Control Driver -- Manages network data connections.
5
* Copyright (C) 2007 Google, Inc.
6
* Author: Brian Swetland <swetland@google.com>
8
* This software is licensed under the terms of the GNU General Public
9
* License version 2, as published by the Free Software Foundation, and
10
* may be copied, distributed, and modified under those terms.
12
* This program is distributed in the hope that it will be useful,
13
* but WITHOUT ANY WARRANTY; without even the implied warranty of
14
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
* GNU General Public License for more details.
19
#include <linux/module.h>
21
#include <linux/cdev.h>
22
#include <linux/device.h>
23
#include <linux/sched.h>
24
#include <linux/wait.h>
25
#include <linux/miscdevice.h>
26
#include <linux/workqueue.h>
27
#include <linux/wakelock.h>
29
#include <asm/uaccess.h>
30
#include <mach/msm_smd.h>
37
#define QMI_RESULT_SUCCESS 0x0000
38
#define QMI_RESULT_FAILURE 0x0001
41
unsigned char service;
42
unsigned char client_id;
43
unsigned short txn_id;
49
#define qmi_ctl_client_id 0
51
#define STATE_OFFLINE 0
52
#define STATE_QUERYING 1
53
#define STATE_ONLINE 2
56
struct miscdevice misc;
60
unsigned char ctl_txn_id;
61
unsigned char wds_client_id;
62
unsigned short wds_txn_id;
69
unsigned char addr[4];
70
unsigned char mask[4];
71
unsigned char gateway[4];
72
unsigned char dns1[4];
73
unsigned char dns2[4];
77
struct wake_lock wake_lock;
79
struct work_struct open_work;
80
struct work_struct read_work;
83
static struct qmi_ctxt *qmi_minor_to_ctxt(unsigned n);
85
static void qmi_read_work(struct work_struct *ws);
86
static void qmi_open_work(struct work_struct *work);
88
void qmi_ctxt_init(struct qmi_ctxt *ctxt, unsigned n)
90
mutex_init(&ctxt->lock);
91
INIT_WORK(&ctxt->read_work, qmi_read_work);
92
INIT_WORK(&ctxt->open_work, qmi_open_work);
93
wake_lock_init(&ctxt->wake_lock, WAKE_LOCK_SUSPEND, ctxt->misc.name);
97
ctxt->state = STATE_OFFLINE;
101
static struct workqueue_struct *qmi_wq;
103
static int verbose = 0;
105
/* anyone waiting for a state change waits here */
106
static DECLARE_WAIT_QUEUE_HEAD(qmi_wait_queue);
109
static void qmi_dump_msg(struct qmi_msg *msg, const char *prefix)
118
"qmi: %s: svc=%02x cid=%02x tid=%04x type=%04x size=%04x\n",
119
prefix, msg->service, msg->client_id,
120
msg->txn_id, msg->type, msg->size);
128
n = x[1] | (x[2] << 8);
132
printk(KERN_INFO "qmi: %s: tlv: %02x %04x { ",
137
printk("%02x ", *x++);
142
int qmi_add_tlv(struct qmi_msg *msg,
143
unsigned type, unsigned size, const void *data)
145
unsigned char *x = msg->tlv + msg->size;
151
memcpy(x + 3, data, size);
153
msg->size += (size + 3);
158
/* Extract a tagged item from a qmi message buffer,
159
** taking care not to overrun the buffer.
161
static int qmi_get_tlv(struct qmi_msg *msg,
162
unsigned type, unsigned size, void *data)
164
unsigned char *x = msg->tlv;
165
unsigned len = msg->size;
171
/* size of this item */
172
n = x[1] | (x[2] << 8);
179
memcpy(data, x + 3, size);
190
static unsigned qmi_get_status(struct qmi_msg *msg, unsigned *error)
192
unsigned short status[2];
193
if (qmi_get_tlv(msg, 0x02, sizeof(status), status)) {
195
return QMI_RESULT_FAILURE;
202
/* 0x01 <qmux-header> <payload> */
203
#define QMUX_HEADER 13
205
/* should be >= HEADER + FOOTER */
206
#define QMUX_OVERHEAD 16
208
static int qmi_send(struct qmi_ctxt *ctxt, struct qmi_msg *msg)
215
qmi_dump_msg(msg, "send");
217
if (msg->service == QMI_CTL) {
218
hlen = QMUX_HEADER - 1;
223
/* QMUX length is total header + total payload - IFC selector */
224
len = hlen + msg->size - 1;
228
data = msg->tlv - hlen;
230
/* prepend encap and qmux header */
231
*data++ = 0x01; /* ifc selector */
236
*data++ = 0x00; /* flags: client */
237
*data++ = msg->service;
238
*data++ = msg->client_id;
241
*data++ = 0x00; /* flags: send */
242
*data++ = msg->txn_id;
243
if (msg->service != QMI_CTL)
244
*data++ = msg->txn_id >> 8;
247
*data++ = msg->type >> 8;
249
*data++ = msg->size >> 8;
251
/* len + 1 takes the interface selector into account */
252
r = smd_write(ctxt->ch, msg->tlv - hlen, len + 1);
261
static void qmi_process_ctl_msg(struct qmi_ctxt *ctxt, struct qmi_msg *msg)
264
if (msg->type == 0x0022) {
266
if (qmi_get_status(msg, &err))
268
if (qmi_get_tlv(msg, 0x01, sizeof(n), n))
270
if (n[0] == QMI_WDS) {
272
"qmi: ctl: wds use client_id 0x%02x\n", n[1]);
273
ctxt->wds_client_id = n[1];
279
static int qmi_network_get_profile(struct qmi_ctxt *ctxt);
281
static void swapaddr(unsigned char *src, unsigned char *dst)
289
static unsigned char zero[4];
290
static void qmi_read_runtime_profile(struct qmi_ctxt *ctxt, struct qmi_msg *msg)
292
unsigned char tmp[4];
295
r = qmi_get_tlv(msg, 0x1e, 4, tmp);
296
swapaddr(r ? zero : tmp, ctxt->addr);
297
r = qmi_get_tlv(msg, 0x21, 4, tmp);
298
swapaddr(r ? zero : tmp, ctxt->mask);
299
r = qmi_get_tlv(msg, 0x20, 4, tmp);
300
swapaddr(r ? zero : tmp, ctxt->gateway);
301
r = qmi_get_tlv(msg, 0x15, 4, tmp);
302
swapaddr(r ? zero : tmp, ctxt->dns1);
303
r = qmi_get_tlv(msg, 0x16, 4, tmp);
304
swapaddr(r ? zero : tmp, ctxt->dns2);
307
static void qmi_process_unicast_wds_msg(struct qmi_ctxt *ctxt,
313
if (qmi_get_status(msg, &err)) {
315
"qmi: wds: network stop failed (%04x)\n", err);
318
"qmi: wds: network stopped\n");
319
ctxt->state = STATE_OFFLINE;
320
ctxt->state_dirty = 1;
324
if (qmi_get_status(msg, &err)) {
326
"qmi: wds: network start failed (%04x)\n", err);
327
} else if (qmi_get_tlv(msg, 0x01, sizeof(ctxt->wds_handle), &ctxt->wds_handle)) {
329
"qmi: wds no handle?\n");
332
"qmi: wds: got handle 0x%08x\n",
337
printk("qmi: got network profile\n");
338
if (ctxt->state == STATE_QUERYING) {
339
qmi_read_runtime_profile(ctxt, msg);
340
ctxt->state = STATE_ONLINE;
341
ctxt->state_dirty = 1;
345
printk(KERN_ERR "qmi: unknown msg type 0x%04x\n", msg->type);
350
static void qmi_process_broadcast_wds_msg(struct qmi_ctxt *ctxt,
353
if (msg->type == 0x0022) {
355
if (qmi_get_tlv(msg, 0x01, sizeof(n), n))
359
printk(KERN_INFO "qmi: wds: DISCONNECTED\n");
360
ctxt->state = STATE_OFFLINE;
361
ctxt->state_dirty = 1;
364
printk(KERN_INFO "qmi: wds: CONNECTED\n");
365
ctxt->state = STATE_QUERYING;
366
ctxt->state_dirty = 1;
367
qmi_network_get_profile(ctxt);
370
printk(KERN_INFO "qmi: wds: SUSPENDED\n");
371
ctxt->state = STATE_OFFLINE;
372
ctxt->state_dirty = 1;
375
printk(KERN_ERR "qmi: unknown bcast msg type 0x%04x\n", msg->type);
379
static void qmi_process_wds_msg(struct qmi_ctxt *ctxt,
382
printk("wds: %04x @ %02x\n", msg->type, msg->client_id);
383
if (msg->client_id == ctxt->wds_client_id) {
384
qmi_process_unicast_wds_msg(ctxt, msg);
385
} else if (msg->client_id == 0xff) {
386
qmi_process_broadcast_wds_msg(ctxt, msg);
389
"qmi_process_wds_msg client id 0x%02x unknown\n",
394
static void qmi_process_qmux(struct qmi_ctxt *ctxt,
395
unsigned char *buf, unsigned sz)
399
/* require a full header */
403
/* require a size that matches the buffer size */
404
if (sz != (buf[0] | (buf[1] << 8)))
407
/* only messages from a service (bit7=1) are allowed */
411
msg.service = buf[3];
412
msg.client_id = buf[4];
414
/* annoyingly, CTL messages have a shorter TID */
424
msg.txn_id = buf[6] | (buf[7] << 8);
429
/* no type and size!? */
434
msg.type = buf[0] | (buf[1] << 8);
435
msg.size = buf[2] | (buf[3] << 8);
441
qmi_dump_msg(&msg, "recv");
443
mutex_lock(&ctxt->lock);
444
switch (msg.service) {
446
qmi_process_ctl_msg(ctxt, &msg);
449
qmi_process_wds_msg(ctxt, &msg);
452
printk(KERN_ERR "qmi: msg from unknown svc 0x%02x\n",
456
mutex_unlock(&ctxt->lock);
458
wake_up(&qmi_wait_queue);
461
#define QMI_MAX_PACKET (256 + QMUX_OVERHEAD)
463
static void qmi_read_work(struct work_struct *ws)
465
struct qmi_ctxt *ctxt = container_of(ws, struct qmi_ctxt, read_work);
466
struct smd_channel *ch = ctxt->ch;
467
unsigned char buf[QMI_MAX_PACKET];
471
sz = smd_cur_packet_size(ch);
474
if (sz < smd_read_avail(ch))
476
if (sz > QMI_MAX_PACKET) {
480
if (smd_read(ch, buf, sz) != sz) {
481
printk(KERN_ERR "qmi: not enough data?!\n");
485
/* interface selector must be 1 */
489
qmi_process_qmux(ctxt, buf + 1, sz - 1);
493
static int qmi_request_wds_cid(struct qmi_ctxt *ctxt);
495
static void qmi_open_work(struct work_struct *ws)
497
struct qmi_ctxt *ctxt = container_of(ws, struct qmi_ctxt, open_work);
498
mutex_lock(&ctxt->lock);
499
qmi_request_wds_cid(ctxt);
500
mutex_unlock(&ctxt->lock);
503
static void qmi_notify(void *priv, unsigned event)
505
struct qmi_ctxt *ctxt = priv;
508
case SMD_EVENT_DATA: {
510
sz = smd_cur_packet_size(ctxt->ch);
511
if ((sz > 0) && (sz <= smd_read_avail(ctxt->ch))) {
512
wake_lock_timeout(&ctxt->wake_lock, HZ / 2);
513
queue_work(qmi_wq, &ctxt->read_work);
518
printk(KERN_INFO "qmi: smd opened\n");
519
queue_work(qmi_wq, &ctxt->open_work);
521
case SMD_EVENT_CLOSE:
522
printk(KERN_INFO "qmi: smd closed\n");
527
static int qmi_request_wds_cid(struct qmi_ctxt *ctxt)
529
unsigned char data[64 + QMUX_OVERHEAD];
533
msg.service = QMI_CTL;
534
msg.client_id = qmi_ctl_client_id;
535
msg.txn_id = ctxt->ctl_txn_id;
538
msg.tlv = data + QMUX_HEADER;
540
ctxt->ctl_txn_id += 2;
543
qmi_add_tlv(&msg, 0x01, 0x01, &n);
545
return qmi_send(ctxt, &msg);
548
static int qmi_network_get_profile(struct qmi_ctxt *ctxt)
550
unsigned char data[96 + QMUX_OVERHEAD];
553
msg.service = QMI_WDS;
554
msg.client_id = ctxt->wds_client_id;
555
msg.txn_id = ctxt->wds_txn_id;
558
msg.tlv = data + QMUX_HEADER;
560
ctxt->wds_txn_id += 2;
562
return qmi_send(ctxt, &msg);
565
static int qmi_network_up(struct qmi_ctxt *ctxt, char *apn)
567
unsigned char data[96 + QMUX_OVERHEAD];
573
for (user = apn; *user; user++) {
579
for (pass = user; *pass; pass++) {
586
for (auth_type = pass; *auth_type; auth_type++) {
587
if (*auth_type == ' ') {
593
msg.service = QMI_WDS;
594
msg.client_id = ctxt->wds_client_id;
595
msg.txn_id = ctxt->wds_txn_id;
598
msg.tlv = data + QMUX_HEADER;
600
ctxt->wds_txn_id += 2;
602
qmi_add_tlv(&msg, 0x14, strlen(apn), apn);
604
qmi_add_tlv(&msg, 0x16, strlen(auth_type), auth_type);
609
qmi_add_tlv(&msg, 0x16, 1, &x);
611
qmi_add_tlv(&msg, 0x17, strlen(user), user);
613
qmi_add_tlv(&msg, 0x18, strlen(pass), pass);
615
return qmi_send(ctxt, &msg);
618
static int qmi_network_down(struct qmi_ctxt *ctxt)
620
unsigned char data[16 + QMUX_OVERHEAD];
623
msg.service = QMI_WDS;
624
msg.client_id = ctxt->wds_client_id;
625
msg.txn_id = ctxt->wds_txn_id;
628
msg.tlv = data + QMUX_HEADER;
630
ctxt->wds_txn_id += 2;
632
qmi_add_tlv(&msg, 0x01, sizeof(ctxt->wds_handle), &ctxt->wds_handle);
634
return qmi_send(ctxt, &msg);
637
static int qmi_print_state(struct qmi_ctxt *ctxt, char *buf, int max)
642
if (ctxt->state == STATE_ONLINE) {
644
} else if (ctxt->state == STATE_OFFLINE) {
650
i = scnprintf(buf, max, "STATE=%s\n", statename);
651
i += scnprintf(buf + i, max - i, "CID=%d\n",ctxt->wds_client_id);
653
if (ctxt->state != STATE_ONLINE){
657
i += scnprintf(buf + i, max - i, "ADDR=%d.%d.%d.%d\n",
658
ctxt->addr[0], ctxt->addr[1], ctxt->addr[2], ctxt->addr[3]);
659
i += scnprintf(buf + i, max - i, "MASK=%d.%d.%d.%d\n",
660
ctxt->mask[0], ctxt->mask[1], ctxt->mask[2], ctxt->mask[3]);
661
i += scnprintf(buf + i, max - i, "GATEWAY=%d.%d.%d.%d\n",
662
ctxt->gateway[0], ctxt->gateway[1], ctxt->gateway[2],
664
i += scnprintf(buf + i, max - i, "DNS1=%d.%d.%d.%d\n",
665
ctxt->dns1[0], ctxt->dns1[1], ctxt->dns1[2], ctxt->dns1[3]);
666
i += scnprintf(buf + i, max - i, "DNS2=%d.%d.%d.%d\n",
667
ctxt->dns2[0], ctxt->dns2[1], ctxt->dns2[2], ctxt->dns2[3]);
672
static ssize_t qmi_read(struct file *fp, char __user *buf,
673
size_t count, loff_t *pos)
675
struct qmi_ctxt *ctxt = fp->private_data;
680
mutex_lock(&ctxt->lock);
682
if (ctxt->state_dirty) {
683
ctxt->state_dirty = 0;
684
len = qmi_print_state(ctxt, msg, 256);
687
mutex_unlock(&ctxt->lock);
688
r = wait_event_interruptible(qmi_wait_queue, ctxt->state_dirty);
691
mutex_lock(&ctxt->lock);
693
mutex_unlock(&ctxt->lock);
698
if (copy_to_user(buf, msg, len))
705
static ssize_t qmi_write(struct file *fp, const char __user *buf,
706
size_t count, loff_t *pos)
708
struct qmi_ctxt *ctxt = fp->private_data;
709
unsigned char cmd[64];
716
len = count > 63 ? 63 : count;
718
if (copy_from_user(cmd, buf, len))
724
if (cmd[len-1] == '\n') {
729
if (!strncmp(cmd, "verbose", 7)) {
731
} else if (!strncmp(cmd, "terse", 5)) {
733
} else if (!strncmp(cmd, "poll", 4)) {
734
ctxt->state_dirty = 1;
735
wake_up(&qmi_wait_queue);
736
} else if (!strncmp(cmd, "down", 4)) {
738
mutex_lock(&ctxt->lock);
739
if (ctxt->wds_busy) {
740
mutex_unlock(&ctxt->lock);
741
r = wait_event_interruptible(qmi_wait_queue, !ctxt->wds_busy);
747
qmi_network_down(ctxt);
748
mutex_unlock(&ctxt->lock);
749
} else if (!strncmp(cmd, "up:", 3)) {
751
mutex_lock(&ctxt->lock);
752
if (ctxt->wds_busy) {
753
mutex_unlock(&ctxt->lock);
754
r = wait_event_interruptible(qmi_wait_queue, !ctxt->wds_busy);
760
qmi_network_up(ctxt, cmd+3);
761
mutex_unlock(&ctxt->lock);
769
static int qmi_open(struct inode *ip, struct file *fp)
771
struct qmi_ctxt *ctxt = qmi_minor_to_ctxt(MINOR(ip->i_rdev));
775
printk(KERN_ERR "unknown qmi misc %d\n", MINOR(ip->i_rdev));
779
fp->private_data = ctxt;
781
mutex_lock(&ctxt->lock);
783
r = smd_open(ctxt->ch_name, &ctxt->ch, ctxt, qmi_notify);
785
wake_up(&qmi_wait_queue);
786
mutex_unlock(&ctxt->lock);
791
static int qmi_release(struct inode *ip, struct file *fp)
796
static struct file_operations qmi_fops = {
797
.owner = THIS_MODULE,
801
.release = qmi_release,
804
static struct qmi_ctxt qmi_device0 = {
805
.ch_name = "SMD_DATA5_CNTL",
807
.minor = MISC_DYNAMIC_MINOR,
812
static struct qmi_ctxt qmi_device1 = {
813
.ch_name = "SMD_DATA6_CNTL",
815
.minor = MISC_DYNAMIC_MINOR,
820
static struct qmi_ctxt qmi_device2 = {
821
.ch_name = "SMD_DATA7_CNTL",
823
.minor = MISC_DYNAMIC_MINOR,
829
static struct qmi_ctxt *qmi_minor_to_ctxt(unsigned n)
831
if (n == qmi_device0.misc.minor)
833
if (n == qmi_device1.misc.minor)
835
if (n == qmi_device2.misc.minor)
840
static int __init qmi_init(void)
844
qmi_wq = create_singlethread_workqueue("qmi");
848
qmi_ctxt_init(&qmi_device0, 0);
849
qmi_ctxt_init(&qmi_device1, 1);
850
qmi_ctxt_init(&qmi_device2, 2);
852
ret = misc_register(&qmi_device0.misc);
854
ret = misc_register(&qmi_device1.misc);
856
ret = misc_register(&qmi_device2.misc);
860
module_init(qmi_init);